Privacy Policy — babol88

babol88 collects personal data from you in three principal ways: information you provide directly when registering or using the platform, information generated automatically by your use of our services, and information we may receive from trusted third-party partners who assist us in delivering our services. We collect only the data that is necessary, relevant, and proportionate to the purpose for which it is collected.

Information you provide directly:

• Registration data: Full legal name, date of birth, residential address, email address, and Bangladeshi mobile phone number.
• Identity verification documents: National Identity Card (NID), passport, birth certificate, or other government-issued photo ID submitted during the KYC process.
• Payment information: bKash account number, Nagad number, Rocket number, Upay details, bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, etc.), or card details (Visa, Mastercard). Full card numbers are never stored on babol88 servers — payment processing is handled by PCI-DSS compliant third-party processors.
• Account preferences: Language preference, responsible gaming limits you set, self-exclusion requests, and communication preferences.
• Support communications: Any messages, emails, or live-chat transcripts exchanged with the babol88 customer support team.

Information collected automatically:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage and behavioural data: Pages visited, games played, bets placed, session duration, click-path data, and feature interactions within the platform.
• Location data: Approximate geographic location inferred from your IP address, used to apply appropriate regional settings and to detect access from restricted jurisdictions.
• Cookies and tracking data: Session cookies, persistent cookies, and similar technologies as described in the Cookies section of this Policy.

Information from third parties:

• Identity verification providers: Third-party KYC and AML (Anti-Money Laundering) service providers may supply us with verification results, watchlist screening outcomes, and PEP (Politically Exposed Persons) status checks.
• Payment processors: Our payment partners may share transaction status updates, fraud alerts, and chargeback notifications.
• Fraud prevention services: Risk-scoring data and fraud signals from industry-standard fraud detection platforms.
• Analytics partners: Aggregated, anonymised traffic and engagement data from analytics platforms to help us understand how players use babol88.

babol88 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may, however, share your data with carefully selected third parties where it is necessary to deliver our services, comply with legal obligations, or protect the legitimate interests of babol88 and our player community.

Categories of third parties with whom we may share your data:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and other payment processors receive the transaction data necessary to process your deposits and withdrawals. These providers are independently responsible for their own data protection practices.
• Identity verification and KYC providers: Specialist third-party KYC and AML compliance providers who assist us in verifying player identities and screening against financial crime watchlists. Data shared is limited to what is strictly necessary for verification purposes.
• Game software providers: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as session tokens and game state data) necessary to deliver their games through our platform. These providers do not receive your full personal profile.
• Analytics and performance providers: Anonymised, aggregated data is shared with analytics platforms to help us understand usage patterns and improve babol88. This data does not identify individual players.
• IT infrastructure and cloud service providers: Data hosting, backup, and security services provided by reputable third-party infrastructure partners operating under contractual data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory directive, babol88 may disclose player data to law enforcement agencies, financial intelligence units, or other competent authorities. We will, where permitted by law, inform you of any such disclosure.
• Fraud prevention networks: In cases of confirmed or strongly suspected fraudulent activity, data may be shared with industry fraud prevention organisations to protect other platforms and players from harm.

All third-party data processors engaged by babol88 are bound by contractual obligations that require them to process your data securely, only for the specific purposes authorised by babol88, and in a manner consistent with this Privacy Policy. We conduct due diligence on all major third-party processors before engagement and review those relationships periodically.

babol88 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, to comply with applicable legal and regulatory obligations, and to resolve any disputes that may arise. We do not retain data for longer than is required, and we apply secure deletion procedures once a retention period has expired.

• Active account data: Retained for the full duration of your registered account on babol88.
• Post-account-closure data: Following voluntary account closure or babol88-initiated account termination, core account and transaction records are retained for a minimum of five (5) years to meet anti-money laundering, fraud prevention, and dispute resolution obligations.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, in line with standard financial services compliance requirements.
• Support communications: Customer support chat logs and email correspondence are retained for up to two (2) years following the date of the communication, unless the subject matter relates to an unresolved dispute or legal proceeding, in which case the retention period is extended accordingly.
• Marketing consent records: Records of your opt-in consent for promotional communications are retained for the duration of your account and for one (1) year following account closure or consent withdrawal.
• Analytics and anonymised data: Aggregated, anonymised usage data that cannot be linked back to an individual may be retained indefinitely for platform improvement and research purposes.
• Self-exclusion records: Records of self-exclusion requests are retained for the full duration of the self-exclusion period plus five (5) years thereafter, to ensure compliance with responsible gaming obligations and to prevent re-registration during an active exclusion period.

When the applicable retention period expires, data is either securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player. If you wish to know the specific retention period applicable to a particular category of your data, you may contact us at support@babol88.

babol88 takes the security of your personal data seriously and applies a layered set of technical and organisational measures to protect your information against unauthorised access, accidental loss, alteration, or disclosure. No online platform can guarantee absolute security, but we make every reasonable effort to maintain robust protections.

• SSL/TLS encryption: All data in transit between your device and babol88 servers is encrypted using SSL/TLS (minimum TLS 1.2). Look for the padlock icon in your browser's address bar as confirmation.
• Encrypted data storage: Sensitive data fields — including identity document data and payment identifiers — are encrypted at rest using industry-standard encryption algorithms.
• Access controls: Internal access to player data is strictly limited to authorised personnel with a legitimate need to access it. Role-based access controls and audit logging are applied across all systems handling personal data.
• Network security: babol88's platform is protected by firewalls, intrusion detection and prevention systems (IDS/IPS), and regular vulnerability scanning.
• Password security: Player passwords are stored as salted cryptographic hashes — your actual password is never stored in readable form on our servers.
• Regular security assessments: We conduct periodic security reviews, penetration testing, and code audits to identify and address potential vulnerabilities proactively.
• Data breach response: In the event of a data breach that poses a risk to player privacy, babol88 will take immediate containment steps, investigate the breach, notify affected players without undue delay, and report to relevant authorities where required by applicable law.

Your role in security: You also play an important part in keeping your account secure. We strongly encourage you to use a strong, unique password for your babol88 account, never share your login credentials with anyone, log out of your account when using a shared device, and contact us immediately at support@babol88 if you suspect any unauthorised access to your account.